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IN THE CLAIMS 

1. (currently amended) A network access control method for a networic system 
comprising: 

network apparatuses having packet filtering fractions; 

a service server connected with an IP network via the network apparatus, providing [fa]] 
contents on the service server to a user; 

a user terminal connected with the IP network via the network apparatus, tor the user to 
utilize th e r e through th e s e rvic e provid e d by said the contents on the service server; 

a reception server connected with the IP network via the network apparatus, receiving an 
access request to the contents on the service server from the user for said on behalf of the service 
server; and 

an access control server controlling the network apparatus for a limitation of the access 
request to the contents on the service server, 
said method comprising the steps of: 

a) said access control server first denying all the access Requests directed to the 
contents on the service server via the network apparatus: 

b) said reception server receiving access request information to the contents on 
the service server from said user terminals, and holding it registering tfoecq in an access list: and 

b) c) said access controllin g control server p e rforming traffic oomrol such on to 
extrac ting such an amount of the access request information from said access list , based on a 
processing capability of said the service server and a traffic amount for said ihe service server, 
such an amount of the access request information hold by said rec e ption server as that which said 
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e^vtee-s^ve r can optimally d a al with, so us to allow th e access for said s<Hv * ^n& ef W f as that 
said service server can optimally deal with, and per forming iraffic control lo the network 
apparatus connected with the user terminals so as to allow the user terminals to directly access 
the contents on the service server in the other of access requests . 

2. (currently amended) A network system comprising: 
network apparatuses having packet filtering function; 

a service server connected with an IP network via the network apparatus, providing [[a]] 
contents on the service server to a user; 

a user terminal connected with the IP network via the network apparatus, for the user to 
utilize the s e rvic e provid e d by said contents on the service server; 

a reception server connected with the IP network via the network apparatus, receiving an 
access request to the contems on the service server from the user for said oi} behalf of the service 
server; and 

an access control server controlling the network apparatuses for a limitation of the access 
request to the contents on the service server, wherein: 

said access control server first denies all the access requests directed to the contents on 
the service server via the network apparatus; 

said reception server having on acoosp rogiGtonng pan which receives access request 
information to the contents on the service server from said user terminals, and holds it registers 
them in an access list : and 

said access controlling control server having a filt e ring optimizing part which porfom^ 
traffic? control s uch as to extract s such an amount of the access request information from said 
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access list , based on a processing capability of said the service server and a Traffic amount for 
sa*4 the service server, such on amount of the access roquost information h e ld in said access 
regist e ring pan as that said service server can optimally doal with, so us to allow tho occoao for 
said s e rvice s e rver as that said service server can optimally deal with, and performs traffic 
control to ihe network apparatus connected with the user terminals so as to allow the user 
terminals to directly access die contents on the service server in the other of access requests . 

3, (currently amended) A server apparatus applicable as said reception server of sa*4 
network system claimed in claim 2, composing: 

an acc e ss list holding acc e ss request information from a user t e rminal; 

a user profile holding die user information including a user class for each user; 

an access receiving part receiving a» the access request to the contents on the service 
server from the user t e rminal on behalf of the service server ; 

an access registering pan registering ihe access request information received via said 
access receiving part into said access list in order of the reception; 

a user class extracting part extracting an IP address from the received access request 
information, and identifying the user by using the extracted IP address so as to extract the user 
class from said user profile; and 

a by-user-class registering part registering the access request information received via 
said access receiving pan into said access list based on the user class extracted through said user 
class extracting part. 

4- (original) The reception server as claimed in claim 3, further comprising: 
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an estimated waiting lime calculating part calculating an estimated wailing rime, from the 
number of the users waiting, according io a position of said access list at which the access 
request received from the user terminal is registered; and 

an access mformanon reporting parr reporting the calculated estimated waiting time to the 
user, and reporting to the user that the access can be performed after the estimated waiting time 
has elapsed. 

5. (original) The reception server as claimed in claim 3, further comprising: 

an access continuing part determining whether or not the access request is to be 
registered in said access list, when waiting is needed, after receiving the access request from the 
user terminal; and 

a waiting confirmation inquiring part inquiring to the user for said access confirming pan 
to make the determination, 

6. (currently amended) A[[nj] server apparatus applicable as said access control server 
of said network system claimed in claim 2. comprising: 

an access information database holding information concerning [[a]] tfee processing 
capability of [[a]] the service server and a maximum permissible access number calculated based 
on the processing capability of the service server; 

a Traffic control pan controlling [[a]] the network apparatus; 

a static permissible access number calculating pan calculating the maximum permissible 
access number based on the information concerning the processing capability of the service 
server; and 
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a filtering optimizing pan reading such an amount of die access requesi information from 
The access list holding the access request information from the user terminals in [[a]] the 
reception server, from the top, as that for the maximum petmissible access number, producing 
packet filtering setting information for the users making access requests to be able to access to 
the service server, and setting the produced information in the network appamtus via said traffic 
control part, 

7. (original) The access control server as claimed in claim 6, further comprising: 
a load and traffic monitoring part monitoring a load condition of the service server and a 
traffic condition of a network apparatus holding the service server; and 

a dynamic permissible access number calculating part periodically performing 
communication with said load and traffic monitoring part so as to extract therefrom information 
of the load condition and traffic condition, and calculate the maximum permissible access 
number therefrom, and, also, registering the calculated maximum permissible access number in 
the access information database, 

8* (original) The access control server as claimed in claim 6, further comprising: 
a control information database holding control information which is used as a guideline 
for reading the access request information from the access list; and 

a by-user-class access request reading part reading the access request information from 
the access list for each user class based on the control information extracted from said control 
information database, when the filtering optimizing part rea<is such an amount of the access 
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request information from The access list as that for the maximum permissible access number, in a 
case where the access request information is registered in the access list by user class. 

9 T (original) The access control server as claimed in claim 6, further comprising: 

an effective timer setting part setting an effective timer for the access request information 

when the packet filtering setting information is produced; and 

a filtering canceling pan canceling the packet filtering control set in the network 

apparatus, when the effective timer has expired. 

10* (currently amended) A server appararus applicable as said service server oonnootod 
with an IP network via a n e twork apparatus and providing - a - sarvioo to a usor of said network 
system claimed in claim 2. comprising: 

a session finish determining pan determining that a session performed with [[a]] the user 
terminal has finished; and 

a session finish reporting part reporting to £[an]] the access control server that the session 
performed with the user tetminal has finished. 

XI. (original) The reception server as claimed in claim 3, further comprising a user 
authenticating pan determining, based on the user class extracted through the user class 
extracting part, whether or not the received access request is given from an unallowed user, and, 
reporting, when the access request is given from the unallowed user, this matter to the access 
control server. 
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12. (original) The access control server as claimed^claim 6, further comprising an 
access unallowance filtering setting pan producing, based cm a report from the user 
authenticating part of the reception server claimed in claim 1 ] , the packet filtering setting 
information of access unallowance for the service server, and setting the produced information in 
the network apparatus. 
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